Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-firefoxalma-upgrade-firefox-x11alma-upgrade-libvpxalma-upgrade-libvpx-develalma-upgrade-thunderbird | Oct 10, 2023 | Sep 28, 2023 | |
| Alpine Linux | alpine-linux-upgrade-libvpxalpine-linux-upgrade-firefox-esralpine-linux-upgrade-qt5-qtwebengine | Aug 22, 2024 | Sep 28, 2023 | |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfocentos-upgrade-thunderbirdcentos-upgrade-thunderbird-debuginfo | Oct 5, 2023 | Sep 28, 2023 |
| Debian | debian-upgrade-chromiumdebian-upgrade-firefox-esrdebian-upgrade-libvpxdebian-upgrade-thunderbird | Oct 2, 2023 | Sep 28, 2023 | |
| Freebsd | freebsd-upgrade-package-chromiumfreebsd-upgrade-package-ungoogled-chromiumfreebsd-upgrade-package-qt6-webenginefreebsd-upgrade-package-electron22freebsd-upgrade-package-electron24freebsd-upgrade-package-electron25freebsd-upgrade-package-libvpx | Sep 29, 2023 | Sep 29, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-libvpxgentoo-linux-upgrade-www-client-chromiumgentoo-linux-upgrade-www-client-google-chromegentoo-linux-upgrade-www-client-microsoft-edge | Oct 5, 2023 | Sep 28, 2023 | |
| Google Chrome | google-chrome-upgrade-latest | Sep 28, 2023 | Sep 28, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libvpx | Mar 13, 2024 | Sep 28, 2023 | |
| Mfsa2023 44 | mozilla-firefox-esr-upgrade-115_3_1mozilla-firefox-upgrade-118_0_1 | Sep 29, 2023 | Sep 28, 2023 | |
| Microsoft Edge | microsoft-edge-upgrade-latest | Oct 2, 2023 | Sep 29, 2023 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-115_3_1 | Oct 2, 2023 | Sep 28, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-firefox-x11oracle-linux-upgrade-libvpxoracle-linux-upgrade-libvpx-develoracle-linux-upgrade-thunderbird | Oct 5, 2023 | Sep 27, 2023 |
| Redhat_linux | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-firefox-x11redhat-upgrade-libvpxredhat-upgrade-libvpx-debuginforedhat-upgrade-libvpx-debugsourceredhat-upgrade-libvpx-develredhat-upgrade-libvpx-utils-debuginforedhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | Oct 5, 2023 | Sep 28, 2023 | |
| Rocky_linux | rocky-upgrade-libvpxrocky-upgrade-libvpx-debuginforocky-upgrade-libvpx-debugsourcerocky-upgrade-libvpx-devel | Aug 15, 2024 | Sep 28, 2023 | |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-libvlc5suse-upgrade-libvlccore9suse-upgrade-libvpx-develsuse-upgrade-libvpx1suse-upgrade-libvpx1-32bitsuse-upgrade-libvpx4suse-upgrade-libvpx4-32bitsuse-upgrade-libvpx7suse-upgrade-libvpx7-32bitsuse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-othersuse-upgrade-operasuse-upgrade-vlcsuse-upgrade-vlc-codec-gstreamersuse-upgrade-vlc-develsuse-upgrade-vlc-jacksuse-upgrade-vlc-langsuse-upgrade-vlc-noxsuse-upgrade-vlc-opencvsuse-upgrade-vlc-qtsuse-upgrade-vlc-vdpaususe-upgrade-vpx-tools | Oct 2, 2023 | Sep 28, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libvpx1ubuntu-pro-upgrade-libvpx3ubuntu-pro-upgrade-libvpx5ubuntu-upgrade-firefoxubuntu-upgrade-libvpx6ubuntu-upgrade-libvpx7ubuntu-upgrade-thunderbird | Oct 3, 2023 | Sep 28, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub